UBUNTU-CVE-2015-4146
See a problem?- Source
- https://ubuntu.com/security/notices/UBUNTU-CVE-2015-4146
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-4146.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-4146
- Related
- Published
- 2015-06-01T00:00:00Z
- Modified
- 2015-06-01T00:00:00Z
- Summary
- [none]
- Details
-
The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.
- References
-
- https://ubuntu.com/security/CVE-2015-4146
- http://w1.fi/security/2015-4/
- http://w1.fi/security/2015-4/eap-pwd-missing-payload-length-validation.txt
- http://w1.fi/security/2015-4/0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch
- http://www.openwall.com/lists/oss-security/2015/05/07/5
- https://ubuntu.com/security/notices/USN-2650-1
- https://www.cve.org/CVERecord?id=CVE-2015-4146
Affected packages
Ubuntu:14.04:LTS / wpa
Package
- Name
- wpa
- Purl
- pkg:deb/ubuntu/wpa@2.1-0ubuntu1.3?arch=src?distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.1-0ubuntu1.3
Affected versions
1.*
1.0-3ubuntu2
1.0-3ubuntu3
1.0-3ubuntu4
2.*
2.1-0ubuntu1
2.1-0ubuntu1.1
2.1-0ubuntu1.2
Ecosystem specific
{
"availability": "No subscription required",
"ubuntu_priority": "medium",
"binaries": [
{
"hostapd-dbgsym": "1:2.1-0ubuntu1.3",
"wpasupplicant-udeb": "2.1-0ubuntu1.3",
"wpagui-dbgsym": "2.1-0ubuntu1.3",
"hostapd": "1:2.1-0ubuntu1.3",
"wpagui": "2.1-0ubuntu1.3",
"wpasupplicant": "2.1-0ubuntu1.3",
"wpasupplicant-udeb-dbgsym": "2.1-0ubuntu1.3",
"wpasupplicant-dbgsym": "2.1-0ubuntu1.3"
}
]
}